Draft for legal review; the wording may change before launch. This policy explains how Pankaj Fabricators ("we", "us") handles personal data on this website and in the Fab ERP service. It is complete on its own.
1Who we are and how to reach us
Fab ERP is offered by Pankaj Fabricators. For anything about your personal data, write to contact@faberp.in. That inbox reaches our Grievance Officer, Mukund Totla, whose details are in our Terms. You can also call +91 91169 11070.
2Two roles we play
- On this website and for your subscription, we decide why and how your personal data is used. Under the Digital Personal Data Protection Act, 2023 we are the Data Fiduciary for it.
- Inside your Fab ERP workspace, your business decides what data goes in (for example, your staff, customers and suppliers). We process that data only to run the service for you, on your instructions.
3What we collect, why, and for how long
| Data | Why we use it | Basis | Kept for |
|---|---|---|---|
| Enquiry form: name, company, phone, e-mail, city, what your business does, whether you use Tally, plan of interest, your message | To reply to you and help you choose a plan | Your consent, given by ticking the box on the form (never ticked for you) | 12 months after our last contact, or until you withdraw consent |
| Sign-up: name, company, GSTIN, billing address, phone, e-mail, plan, user count, billing period | To set up your workspace, bill you and issue GST invoices | Your consent and the subscription you take | While you subscribe, then as long as tax law requires |
| Payment records: amount, date, Razorpay payment and mandate reference | To bill you, send pre-debit notices and process refunds | The subscription you take; tax law | As long as tax law requires |
| Sign-in and activity records inside the service | To keep the service secure and to investigate misuse | Security of the service, as the law allows | At least one year |
| Server logs on this website (IP address, time, page) | To keep the site running and secure | Security of the site | 30 days |
We do not see or keep your card number or bank account number. Razorpay collects them on its own pages. We collect no health, biometric or similar sensitive data on this site. This website runs no advertising trackers and no analytics cookies.
4Who we share it with
- Razorpay Software Private Limited, to take payments and run your auto-pay mandate.
- Netlify, Inc., which hosts this website and receives the enquiry form.
- Each processes data only for us and on our instructions. Netlify may store website data outside India.
- We do not sell personal data, and we do not share it for advertising.
- We disclose data to a government authority only when the law requires it.
5Where the service runs and how it is protected
- Today the Fab ERP service runs on servers in India.
- Inside your workspace, the roles you give your users control what each user can see and do.
- You can ask for an export of your workspace data at any time, by e-mail to contact@faberp.in.
6Children
Fab ERP is for businesses and is not meant for anyone under 18. We do not knowingly collect a child's data.
7Your rights, and how long we take
You may ask us to:
- give you a summary of the personal data we hold about you and who we have shared it with;
- correct, complete or update it;
- erase it, unless the law requires us to keep it;
- let a person you nominate act for you if you die or cannot act;
- stop using it where you gave consent. Withdrawing consent is as easy as giving it: one e-mail to contact@faberp.in.
We acknowledge your request within 48 hours and answer it within 30 days. If you are not satisfied with our answer, you may complain to the Data Protection Board of India.
8If something goes wrong
If personal data is exposed, lost or misused, we tell you without delay: what happened, what it means for you, what we are doing, and what you can do. We also report it to the Data Protection Board of India, as the law requires.
9Keeping and erasing data
We keep personal data only as long as the purpose in section 3 needs it, then erase it, unless a law requires us to keep it longer. When you withdraw consent for enquiry data, we erase it within 30 days.
10Changes to this policy
We publish every change on this page with a new effective date. If a change affects how we use data you already gave us, we tell you by e-mail first.